Commit af72fddc authored by Clement Bois's avatar Clement Bois
Browse files

Merge branch 'fix-sbom/only-lock-for-lockfile' into 'master' 

fix(sbom): only look for lockfile with pnpm

Closes #51

See merge request to-be-continuous/node!90
parents 70ffd3ba 805aaed2

templates/gitlab-ci-node.yml

+2 −2
Original line number Diff line number Diff line
@@ -859,9 +859,9 @@ node-sbom: 
    - |

      if [ "$NODE_MANAGER" = 'pnpm' ]

      then

        pnpm dlx @cyclonedx/cdxgen${NODE_SBOM_VERSION:+@$NODE_SBOM_VERSION} --output reports/node-sbom.cyclonedx.json $NODE_SBOM_OPTS

        pnpm dlx @cyclonedx/cdxgen${NODE_SBOM_VERSION:+@$NODE_SBOM_VERSION} --type pnpm --output reports/node-sbom.cyclonedx.json $NODE_SBOM_OPTS

      else

        npx -y @cyclonedx/cyclonedx-npm${NODE_SBOM_VERSION:+@$NODE_SBOM_VERSION} --output-format JSON --output-file reports/node-sbom.cyclonedx.json $NODE_SBOM_OPTS

        npx -y @cyclonedx/cyclonedx-npm${NODE_SBOM_VERSION:+@$NODE_SBOM_VERSION} --output-file reports/node-sbom.cyclonedx.json $NODE_SBOM_OPTS

      fi

    - chmod a+r reports/node-sbom.cyclonedx.json

  artifacts: